Cybersecurity and CUI Compliance Support

The contract requires contractors to ensure their information systems fully comply with NIST SP 800-171 and DFARS 252.204-7012 to protect controlled unclassified information, including conducting regular self-assessments to verify adherence to security requirements. This subcontract is part of a Department of Defense initiative under the Aviation Supply Chain ESOC Buys organization, targeting cybersecurity measures for systems handling sensitive but unclassified data. Compliance must be demonstrated through documented controls aligned with the NIST framework and reporting of any security incidents or gaps, with a focus on continuous accountability and remediation of deficiencies. The solicitation is open for responses until July 14, 2026, with a NAICS code of 541512 indicating it pertains to computer systems design services. There is no set-aside classification specified, and the place of performance and point of contact details are not provided. Contractors must be prepared to validate their compliance posture without external audits, relying on internal assessments and accurate recordkeeping to meet federal standards. Participation requires existing or implementable cybersecurity infrastructure compliant with federal guidelines and the capacity to maintain ongoing compliance throughout the contract lifecycle.